🛠 Tech Stack

💼 About This Role

You'll own one or more security domains at a fast-growing AI company, building controls from the ground up. You'll protect cloud and AI infrastructure at scale, working with a team that values innovation and craftsmanship.

🎯 What You'll Do

• Secure AWS/GCP environments with IaC security gates and Zero Standing Privileges
• Design data classification and audit logging for audio/transcription/PII
• Integrate SAST/DAST into CI/CD and defend against LLM threats
• Manage Secure Boot, PKI lifecycle, and supply chain scanning for hardware

📋 Requirements

• 5+ years of security engineering experience with deep expertise in one domain
• Proven ability to build security controls from zero independently
• Cross-domain awareness and clear risk communication to engineering and leadership
• Familiarity with NIST CSF, OWASP, or MITRE ATT&CK frameworks

✨ Nice to Have

• Experience with AI tools for security (LLM-assisted triage, automated CSPM)
• Familiarity with hardware/firmware security standards like EN 18031

🎁 Benefits & Perks

• 📈 Employee Stock Ownership Plan (ESOP) with a real stake in company success
• 🤖 Cutting-edge AI tools access (Cursor, GPT, Gemini, Claude)
• 💻 Best-in-class equipment (top-spec laptops, workstations, Plaud devices)
• 🏖️ Annual company offsites and team events
• 🏥 Medical & insurance coverage (medical insurance, WICA)

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Screen· 30 min
2. 2Technical Interview· 60 min
3. 3Hiring Manager Interview· 45 min

🚩 Heads Up

• Extensive domain expectations across six areas for one role